Aave TVL Plummets $6.6 Billion Following Kelp Bridge Exploit

Aave's total value locked (TVL) crashed from $26.4 billion on April 18 to approximately $20 billion by Sunday morning, marking a $6.6 billion outflow. The AAVE token declined 16% to $92 as liquidations surged and daily fees spiked to $1.99 million. The instability was triggered by an external exploit of the Kelp liquid restaking protocol's cross-chain bridge. Attackers drained 116,500 rsETH—valued at roughly $292 million—and deposited the stolen assets into Aave V3 to borrow wrapped ether (WETH). On-chain data indicates the Aave-specific borrow from this exploit was approximately $196 million, part of a broader $236 million position across Aave, Compound, and Euler. The attack targeted the WETH pair, which constitutes 39.49% of all loans on the Aave protocol, amplifying the impact on its loan book. While Aave founder Stani Kulechov clarified that the protocol's own contracts were not compromised, the event exposes a structural flaw in the whitelisting of liquid restaking tokens. These assets were priced under the assumption they would hold their peg, failing to account for a scenario where the underlying collateral vanishes due to a bridge exploit. The market is now focused on whether Aave's Umbrella reserve is sufficient to cover the deficit or if stkAAVE holders will be forced to absorb the losses. As a foundational piece of DeFi infrastructure, the contagion risk associated with Aave's current instability signals broader fragility across the decentralized finance ecosystem.